confidentialityensures thatdata is notdisclosed tounintendedpersonsexploita procedure orproduct that takesadvantage of avulnerability tocarry out a threatIPAddressa series ofnumbers thatidentifies anydevice on anetworkthreatanything thathas thepotential tocause the lossof an assetscriptkiddieunsophisticatedthreat actorsthat find andrun attacks theyfind online zerodayattack targeting asoftwarevulnerability whichis unknown to thesoftware vendor orto antivirus vendors penetrationtestingattempt toevaluate thesecurity of an ITinfrastructure bysafely trying toexploitvulnerabilitieshactivistmisuse a computersystem or networkfor socially orpolitically motivatedreasonsenumerationprocess ofextracting usernames, machinenames, networkresources, sharesand services from asystemreconnaissancepractice ofcovertlydiscovering andcollectinginformationabout a systemLinuxopen source andcommunity-developed operatingsystem forcomputers, servers,mainframes, mobiledevices andembedded devicesthink likeanadversarystrategy thatallows you toanticipate attackstrategies anddefend yoursystemsaccordinglyPrincipleof LeastPrivilegeusers andprograms shouldonly have thenecessary accessto complete theirtasksdefenseindeptha security approachthat combinesmultiple securitycontrols anddefenses to create acumulative effectnon-repudiationprovidesvalidation ofa message'soriginIoTnetwork ofphysical objectsembedded withsensors andsoftwareconnected to theInternetthreatagentperson orentity thatattempts orcarries out athreatcybercriminalusually seek toexploit securityvulnerabilities forsome kind offinancial reward orrevengeavailabilityensures theuptime of thesystem so thatdata isaccessiblewhen neededMACAddressa hardwareidentificationnumber thatuniquely identifieseach device on anetworkvulnerabilitya weakness that allowsa threat to be carriedout, such as a USBport that is enabled onthe server hosting thedatabase or a serverroom door that isfrequently left ajarnation-stateextremelysophisticatedhacker that issponsored by oraffiliated with agovernmentalorganizationassetsomethingthat hasvalue to theperson ororganizationintegrityensures thatdata is notmodified ortamperedwithconfidentialityensures thatdata is notdisclosed tounintendedpersonsexploita procedure orproduct that takesadvantage of avulnerability tocarry out a threatIPAddressa series ofnumbers thatidentifies anydevice on anetworkthreatanything thathas thepotential tocause the lossof an assetscriptkiddieunsophisticatedthreat actorsthat find andrun attacks theyfind online zerodayattack targeting asoftwarevulnerability whichis unknown to thesoftware vendor orto antivirus vendorspenetrationtestingattempt toevaluate thesecurity of an ITinfrastructure bysafely trying toexploitvulnerabilitieshactivistmisuse a computersystem or networkfor socially orpolitically motivatedreasonsenumerationprocess ofextracting usernames, machinenames, networkresources, sharesand services from asystemreconnaissancepractice ofcovertlydiscovering andcollectinginformationabout a systemLinuxopen source andcommunity-developed operatingsystem forcomputers, servers,mainframes, mobiledevices andembedded devicesthink likeanadversarystrategy thatallows you toanticipate attackstrategies anddefend yoursystemsaccordinglyPrincipleof LeastPrivilegeusers andprograms shouldonly have thenecessary accessto complete theirtasksdefenseindeptha security approachthat combinesmultiple securitycontrols anddefenses to create acumulative effectnon-repudiationprovidesvalidation ofa message'soriginIoTnetwork ofphysical objectsembedded withsensors andsoftwareconnected to theInternetthreatagentperson orentity thatattempts orcarries out athreatcybercriminalusually seek toexploit securityvulnerabilities forsome kind offinancial reward orrevengeavailabilityensures theuptime of thesystem so thatdata isaccessiblewhen neededMACAddressa hardwareidentificationnumber thatuniquely identifieseach device on anetworkvulnerabilitya weakness that allowsa threat to be carriedout, such as a USBport that is enabled onthe server hosting thedatabase or a serverroom door that isfrequently left ajarnation-stateextremelysophisticatedhacker that issponsored by oraffiliated with agovernmentalorganizationassetsomethingthat hasvalue to theperson ororganizationintegrityensures thatdata is notmodified ortamperedwith

Cybersecurity Overview - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. ensures that data is not disclosed to unintended persons
    confidentiality
  2. a procedure or product that takes advantage of a vulnerability to carry out a threat
    exploit
  3. a series of numbers that identifies any device on a network
    IP Address
  4. anything that has the potential to cause the loss of an asset
    threat
  5. unsophisticated threat actors that find and run attacks they find online
    script kiddie
  6. attack targeting a software vulnerability which is unknown to the software vendor or to antivirus vendors
    zero day
  7. attempt to evaluate the security of an IT infrastructure by safely trying to exploit vulnerabilities
    penetration testing
  8. misuse a computer system or network for socially or politically motivated reasons
    hactivist
  9. process of extracting user names, machine names, network resources, shares and services from a system
    enumeration
  10. practice of covertly discovering and collecting information about a system
    reconnaissance
  11. open source and community-developed operating system for computers, servers, mainframes, mobile devices and embedded devices
    Linux
  12. strategy that allows you to anticipate attack strategies and defend your systems accordingly
    think like an adversary
  13. users and programs should only have the necessary access to complete their tasks
    Principle of Least Privilege
  14. a security approach that combines multiple security controls and defenses to create a cumulative effect
    defense in depth
  15. provides validation of a message's origin
    non-repudiation
  16. network of physical objects embedded with sensors and software connected to the Internet
    IoT
  17. person or entity that attempts or carries out a threat
    threat agent
  18. usually seek to exploit security vulnerabilities for some kind of financial reward or revenge
    cyber criminal
  19. ensures the uptime of the system so that data is accessible when needed
    availability
  20. a hardware identification number that uniquely identifies each device on a network
    MAC Address
  21. a weakness that allows a threat to be carried out, such as a USB port that is enabled on the server hosting the database or a server room door that is frequently left ajar
    vulnerability
  22. extremely sophisticated hacker that is sponsored by or affiliated with a governmental organization
    nation-state
  23. something that has value to the person or organization
    asset
  24. ensures that data is not modified or tampered with
    integrity